Software Engineer SME DevSecOps & Artifact Management TS/SCI
GCA
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
GCA is seeking a Software Engineer SME specializing in DevSecOps and secure software development to support NCIS in Quantico, VA. The role focuses on migrating mission applications to secure toolchains, enhancing software supply chain security, and guiding development teams.
The ideal candidate has 10+ years of technical experience, TS/SCI clearance, and deep expertise in artifact management and engineering security across diverse environments; hybrid work with onsite 1–2 days weekly.
Qualifications
- Active Top Secret clearance with SCI access.
- Minimum of 10 years of relevant technical experience with a high school diploma, or commensurate experience.
- Expert-level secure software development and DevSecOps principles across full-stack application environments.
- Expertise with artifact management platforms such as Nexus, Artifactory, NuGet, or comparable technologies.
- Experience implementing and supporting SAST/DAST and code quality platforms such as SonarQube, Aikido, CodeQL, or similar tools.
- Strong knowledge of secure coding practices, software dependency management, software supply chain security, and SBOM requirements.
- Experience implementing Git-based development workflows, including branch protection policies, pre-commit hooks, and code management practices.
- Experience with relational and NoSQL databases and application development across compiled and interpreted programming languages.
- Understanding of Zero Trust principles and their application to secure software development.
- Ability to apply software engineering and security principles across multiple operating systems, programming languages, and hosting environments.
- Strong analytical, troubleshooting, and problem-solving skills.
- Ability to provide technical guidance and mentorship to software development teams.
- Must reside within commuting distance of Quantico, VA, and be available for onsite support as required.
Responsibilities
- Provide technical expertise and guidance in migrating mission applications to secure software development toolchains and environments.
- Implement and support DevSecOps practices throughout the software development lifecycle (SDLC), ensuring compliance with applicable Department of the Navy cybersecurity policies.
- Configure, maintain, and optimize software artifact management platforms such as Nexus, JFrog Artifactory, NuGet, or similar solutions.
- Support secure coding practices, application security standards, and software supply chain security initiatives.
- Implement and manage Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) capabilities using tools such as SonarQube, Aikido, CodeQL, or similar platforms.
- Support Software Bill of Materials (SBOM) development, dependency management, vulnerability identification, and remediation processes.
- Implement secure Git-based development workflows, including branch management rules, pre-commit hooks, and code quality controls.
- Provide technical guidance on Zero Trust principles and their application to software development environments.
- Evaluate application security and software engineering practices across relational and NoSQL databases, compiled and interpreted programming languages, and diverse operating systems.
- Collaborate with software developers, cybersecurity personnel, and technical teams to integrate security controls into development processes.
- Identify security weaknesses, code quality issues, and software development risks, recommending appropriate corrective actions.
- Provide mentorship and technical guidance to development teams to promote consistent adoption of secure software development standards and best practices.
Skills
Education
Tools
Job description
We are seeking a highly skilled
- 401(k) matching
- Competitive salary
- Dental insurance
- Health insurance
- Paid time off
- Parental leave
- Vision insurance
We are seeking a highly skilled Software Engineer Subject Matter Expert (SME) specializing in DevSecOps, artifact management, and secure software development to join our team supporting the Naval Criminal Investigative Service (NCIS) in Quantico, Virginia. The ideal candidate will possess extensive experience in secure software development practices, software artifact management, and application security across diverse development environments. This position will support the migration of mission-critical applications to a secure software development toolchain while ensuring compliance with Department of the Navy Chief Information Officer (DON-CIO) policies and security requirements. The successful candidate will provide technical expertise, guidance, and hands‑on support to software development teams to improve code quality, strengthen software supply chain security, and implement sustainable secure development practices. This position offers a hybrid work schedule, with onsite support required approximately 1–2 days per week or as mission requirements dictate.
- Provide technical expertise and guidance in migrating mission applications to secure software development toolchains and environments.
- Implement and support DevSecOps practices throughout the software development lifecycle (SDLC), ensuring compliance with applicable Department of the Navy cybersecurity policies.
- Configure, maintain, and optimize software artifact management platforms such as Nexus, JFrog Artifactory, NuGet, or similar solutions.
- Support secure coding practices, application security standards, and software supply chain security initiatives.
- Implement and manage Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) capabilities using tools such as SonarQube, Aikido, CodeQL, or similar platforms.
- Support Software Bill of Materials (SBOM) development, dependency management, vulnerability identification, and remediation processes.
- Implement secure Git-based development workflows, including branch management rules, pre-commit hooks, and code quality controls.
- Provide technical guidance on Zero Trust principles and their application to software development environments.
- Evaluate application security and software engineering practices across relational and NoSQL databases, compiled and interpreted programming languages, and diverse operating systems.
- Collaborate with software developers, cybersecurity personnel, and technical teams to integrate security controls into development processes.
- Identify security weaknesses, code quality issues, and software development risks, recommending appropriate corrective actions.
- Provide mentorship and technical guidance to development teams to promote consistent adoption of secure software development standards and best practices.
- Active Top Secret clearance with SCI access.
- Minimum of 10 years of relevant technical experience with a high school diploma, or commensurate experience.
- Expert-level experience with secure software development and DevSecOps principles across full-stack application environments.
- Expertise with artifact management platforms such as Nexus, Artifactory, NuGet, or comparable technologies.
- Experience implementing and supporting SAST/DAST and code quality platforms such as SonarQube, Aikido, CodeQL, or similar tools.
- Strong knowledge of secure coding practices, software dependency management, software supply chain security, and SBOM requirements.
- Experience implementing Git-based development workflows, including branch protection policies, pre-commit hooks, and code management practices.
- Experience with relational and NoSQL databases and application development across compiled and interpreted programming languages.
- Understanding of Zero Trust principles and their application to secure software development.
- Ability to apply software engineering and security principles across multiple operating systems, programming languages, and hosting environments.
- Strong analytical, troubleshooting, and problem-solving skills.
- Ability to provide technical guidance and mentorship to software development teams.
- Must reside within commuting distance of Quantico, VA, and be available for onsite support as required.
- Experience supporting Department of Defense or Department of the Navy software development environments.
- Familiarity with DON-CIO secure software development policies.
- Experience supporting application modernization and migration to secure development toolchains.
- Experience establishing or improving enterprise DevSecOps processes and development security standards.
- Experience supporting software development initiatives within classified government environments.
GCA is a Small Disadvantaged Veteran-Owned company supporting several government contracts. GCA is pleased to offer a competitive benefits package to all full-time employees. Below is a brief overview of our benefits package.
- Competitive Compensation
- Paid Time Off includes 10 federal holidays and 15 additional days
- Bereavement Leave
- Parental Leave
- PTO Cash Out
- Company-Paid Short-Term and Long-Term Disability (STD/LTD)
- Life and AD&D Insurance
- Medical, Prescription, Dental, and Vision Coverage
- 401(k) Savings Plan with Company Match
- Employee Referral Program
At GCA, we stand at the forefront of innovation, lighting the way toward a future where technology serves as a beacon of possibility. As a premier provider of Information Technology and Audio-Visual Integration services, our mission is to empower individuals and organizations to navigate the digital landscape with confidence and clarity. We provide advanced information technology support services and Audio-Visual system solutions to government and commercial customers worldwide.
Flexible work from home options available.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
